Privacy Policy of NexEco AI

Last updated on 27 February 2026This Privacy Policy governs how NexEco AI (“NexEco AI”, “we”, “our” or “us”) collects, uses, maintains, and discloses information collected or submitted by users (each, a "User" or “you”) when you access, install, or use NexEco AI Services regardless of the device (computer, mobile phone, tablet, etc.) you use. NexEco AI Services means the NexEco AI website, workspace, mobile application, browser extension, APIs and other services that may be provided by NexEco AI.By visiting our Services, by submitting your personal data to us, and by accessing, installing and/or using our Services, you confirm that you have read this Privacy Policy and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy or any provisions hereof, please do not use our Services.

Role of NexEco AI

Controller - we act as a data controller of your personal data as described in this Privacy Policy and as specified under many privacy laws. The company responsible for handling your personal data is spectra tech, UAB (address: Švitrigailos g. 36, LT-03230 Vilnius, Lithuania, email: legal@nexeco-ai.com).

Processor - we act as processors of your personal data when this data is processed on behalf of our Customers as defined in Terms of Use. Examples of such data could be information (prompts, files, etc.) collected, submitted, uploaded to the NexEco AI by the User of the Customer. This Privacy Policy does not apply to content that we process on behalf of our Customers. The use of such data is governed by the agreements we have with our Customers, which cover access to and utilisation of these services.

What personal data do we process, for what purposes and on what grounds?

We collect personal data if you use our Services or communicate with us as follows:

Personal data (categories)

Purposes of processing

Legal basis

Communication information

If you communicate with us, whether via forms on NexEco AI, email or through our pages on social media sites, we may collect Personal Data like your name, last name, Business contact information (email, telephone), and the contents of the messages you send, company that you work at, job title

Legitimate interest to contact you.

Other information you decide to provide

We may also collect additional information that you choose to provide, for example when you participate in our events, webinars or surveys. This may include: name, last name business contact information (email, telephone, address) company that you work at, job title

Consent or legitimate interest.

Information collected on our website and or mobile application

We place cookies to process website usage data so we can measure, improve, operate and administer the performance of our Services. When you use our mobile applications, we may collect information through analytics SDKs and device identifiers to monitor app performance, understand usage patterns, and improve our services. For more information see our

Consent or legitimate interest. Consent for any data collected for behaviour monitoring (e.g. analytics), legitimate interest to ensure the product operates reliably and efficiently, such as monitoring performance, detecting crashes or generating technical logs

Information we receive from other sources

We receive information from our customers and trusted partners such as security providers, to protect against security threats to our services. Additionally, we receive information from marketing vendors who provide us with information about potential customers for our business activities.We may obtain business contact information from reputable third-party providers, including business databases and professional information services. We conduct due diligence on these sources and require appropriate data protection standards.

Legitimate interest or consent. Legitimate interest to protect our services against security threats, to identify potential business opportunities and facilitate B2B communications. Legitimate interest or consent to send out marketing communications.

We may also aggregate or anonymise personal data to ensure it no longer identifies you. This anonymised data can then be utilised for various purposes, including analysing how our services are used, enhancing and adding new features, and conducting research. We will maintain and use anonymised data in its anonymised state and will not attempt to re-identify it, except where legally mandated.

Personal data (categories)

User Account Information

Purposes of processing

When you create an account with us, we will collect information associated with your account, including your name, contact information (collectively, “Account Information”).

Legal basis

Legitimate interest in enabling the user to use our services.

Personal data (categories)

Communication information

Purposes of processing

If you communicate with us, whether via email or through our pages on social media sites, we may collect Personal Data like your name, contact information, and the contents of the messages you send.

Legal basis

Legitimate interest to contact you.

Personal data (categories)

Other information you provide

Purposes of processing

We collect other information that you may provide to us, such as when you participate in our events or surveys.

Legal basis

Consent or legitimate interest.

Personal data (categories)

Website Interaction Data, IP addresses, device information, location

Purposes of processing

We place cookies to process these data so we can measure and improve the performance of our Site and operate and administer our services.

See for more information our Cookie Policy

Legal basis

Consent or legitimate interest; consent for Tracking Cookies (as defined in our Cookie Policy) to operate our website and services.

How long will we keep your personal data?

We store your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable laws and regulations. The storage period for personal data processed by our customers, service providers and other third parties, who act as independent controllers, is determined by their respective privacy statements.

Your rights in relation to your personal data

If the GDPR applies to you, you have certain rights, such as:

Access, correct, or delete your personal data.
Restrict the processing of your personal data (when there is a legal basis for that)
Request data portability (to transfer your personal data to another service provider).
Object to the processing of your personal data which is done on the basis of our legitimate interests (e.g., for marketing purposes)
Withdraw consent at any time where we rely on your consent for processing. If you withdraw your consent, this will only take effect for future processing.

There may be circumstances where we cannot accommodate a request if it would prevent us from fulfilling certain legal obligations under applicable laws and regulations.

If you would like to exercise any of these rights, please send an e-mail to email. We aim to address your question or request within four (4) weeks of receipt. Regarding the use of your personal data by NexEco AI for our mailing list, you can also opt-out by clicking the unsubscribe option at the bottom of each email.

In the unlikely event that our response does not meet your expectations, you have the right to file a complaint with the supervisory authority in your country of residence.

You can control the use of cookies at the individual browser level on your device. To disable cookies, follow your browser’s instructions on how to block or clear cookies and as well instructions on our

Providing and sharing your personal data

Your personal data is available and accessible only to those who need it to accomplish the intended processing purpose. We may share your personal data with affiliated companies, subcontractors, partners, and other third parties, such as:

Vendors and service providers: For business operations and services like hosting, customer service, cloud services, content delivery, support, email communication, web analytics, payment processing, and IT services.
Business transfers: During strategic transactions, reorganisations, bankruptcies, or service transitions, your data may be disclosed and transferred to successors or affiliates.
Government authorities or third parties: To comply with legal obligations, protect our rights, prevent fraud, ensure safety, or protect against legal liability.
Affiliates: With entities under common control, using data in line with our Privacy Policy.
Business account administrators: Administrators may access and control your account, and we may share account information with your employer or organisation.
Other Users and third parties: When interacting or sharing information, governed by their own terms and privacy policies.

Our Services may include links to other websites (e.g., social media, websites) whose privacy practices may be different from ours. If you access any of those websites via such links and/or submit your personal data to any of those websites, your personal data is processed by the procedures established by them and governed by their privacy policies. We encourage you to carefully read the privacy policy (or other respective privacy notice) of any website you visit.

Transfers outside the EEA

We will only transfer personal data to countries outside the European Economic Area (EEA) (comprising all the EU countries plus Iceland, Liechtenstein and Norway) without an adequacy decision if we can comply with the principles of chapter V GDPR, including the EU Standard Contractual Clauses (SCCs).

Do we process personal data of children?

We do not knowingly collect or solicit personal data from anyone under the age of 18. If you are under 18, please do not attempt to send any personal data about yourself to NexEco AI. If we acknowledge that we have collected and processed personal data from a child under the age of 18, we will delete that data as quickly as possible. If you have reason to believe that a child under the age of 18 has provided personal data to us through our Services or contact form, please email us at legal@nexeco-ai.com.

How do we keep your personal data safe?

We are committed to keeping your personal data safe against accidental or unlawful destruction, loss, alteration and unauthorized disclosure or access. To this end, we have implemented appropriate technical and organizational security measures (in line with industry best practices):

Physical Measures. We control access to our facilities with access cards.We also use security alarm systems and CCTV. We store devices with personal data information only in locked rooms or cabinets. Our printers are protected by access control measures. A clean desk policy is implemented.

Technical Measures. We use layered defense with firewalls, anti-malware protection, intrusion detection and prevention systems. Our infrastructure is regularly updated and regular vulnerability scans are in place to detect possible vulnerabilities. We have security event and incident management solutions to correlate and investigate signals in security tools. Servers are hardened and automated configuration tools are used to manage them. All workplaces are managed from a centralized endpoint management tool. Data at rest and in transit are encrypted. Encryption protocols are used according to the newest security practices.

Organizational Measures. We adopted information security and data processing policies according to best practices. We have external audits to prove our information security and data processing policies are up to standards. We adopted a constant development culture of security and data protection awareness among our employees (including organizing regular and ongoing training and other awareness activities). We analyze the threat landscape and attack surface and constantly update our security measures. Access to databases containing personal data is granted on a need-to-know basis.

Changes to this Privacy Policy

We develop our Services introducing new features or modifying current ones constantly, therefore NexEco AI reserves the right to update this Privacy Policy at any time. When we do, we will revise the updated date at the bottom of this page. We encourage users to frequently check this page for any changes to stay informed about how we are protecting the personal data we collect.

Contacting us

For any questions regarding this statement or the practices of the Site, you can contact NexEco AI at Švitrigailos g. 36, Vilnius LT-03230, Lithuania or via e-mail at email.